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WHAT rS CLAIMED IS: 

1 . A method for reducing bandwidlb needed lo transmit key update infoimation 
for a plurality of members fonning a group, comprising: 

(a) associating a subgroup of said group with a leaf node of a hier&rchicat trec» 
said leaf node having associated therewith a leaf key common to members of said subgroup, 
wherein upon eviction of at least one member of said group, said leaf key enables said 
rnembers of said subgroup to receive an update cnessage for an interior node above said leaf 
node. 

2. The method of claim 1, wherein said evicted member is not a part of said 
subgroup. 

3. The method of claim 1, wherein said evicted member is part of said subgroup. 

4. The method of claim 3> wherein said subgroup is a self-repairing group, said 
self-repairing group being operative to update said leaf key independently. 

5. The method of claim 4, wherein said self-repairing group uses a reusable 



power set 



6. 



The method of claim 1. wherein key updates are performed using a logical key 



hierarchy method. 
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7. The method of claim 1, wherein key updates are perfonned using a one-way 
function tree method 

B. The ineihod of claim 1, wherein key updates are performed using a one-way 
fiuictioa chain method. 

9. The method of cJairn 1, wherein said hierarchical tree is a binary tree. 

10. The method of claim I, wherein said hierarchical tree is a D-ary tree. 

11. A key distnbuticn.method, comprising: 

(a) evicting at least one member of a group, said group having a plMrabty of 
members that share a common node key; 

(b) notifying a plurality of members of said group that said at least one member 
has been evicted; and 

(c) detemiining a new value for said conunon node key, wherein said 
detemiinaiion is capable of being performed independently by said pluraJitjLOf members of 
said group, — 

12. The method of claim 11, wherein said evicting courses evicting one 
member of said group. 
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13. The method ofclaim 11, wherein said evicting comprises cviciing more than 
one member of said group. 

14. The method of claim 11, wherein said noticing comprises transmitting 
identities of said a1 least one evicted member. 

15. The method ofclaim 11, whereto said plurality of members of said group and 
said at least one evicted member fomi a self-repairing group. 

16. The method ofclaim 15, wherein said self-repairing group is based on a 
reusable power set. 

17. A key distribution method, comprising: 

(a) grouping a plurality of said members of said group to form a subgroup of said 
group, said subgroup having a common key known only to said members of said subgroup, 
said common key being associated wdth a conunon node in a hierarchical tree, said subgrx)up 
members being operative to independently update said common key upon e^tion of one or 
more members of said subgroup: and " 

(b) distributing key update messages for said hierarchical tree upon eviction of 
one or more members of said subgroup, wherein said distributed key update messages do not 
update keys associated with nodes below said common node. 
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18. The method of claim 17. wherein said subgroup is based on a reusable power 



set. 



19. The method of claim 17, wherein said key update messages are based on a 
logical key hierarchy method. 

20. The mechod of claim 17, wherein said key ^>datc messages are based on a 
one-way function tree method. 

21. The method of claim 17, wherein said key update messages are based on a 
one-way function chain method. 

22. The method of claim 17, whcrrin said hierarchical tree is a binary tree. 

23. The method of claim 17, wherein said hierarchical tree is a D-ary tree. 

24. A secret sharing system, comprising; • ~ 

"key s^er that is operative to associate a subgroup of a group havin|-a plurality of 
members with a leaf node of a hierarchical tree, said leaf node having associated Iherewiih a 
leaf key common lo member; of said subgroup, wherein upon eviction of at least one 
member of said group, said key server uses said leaf key to transmit an update message to 
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5aid ru«nb«s of .aid subgroup for a key associated with an interior node above said leaf 
node. 

25. A computer program product, eompriang: 

computer-teadable program code for causing a coroputer to associate a subffoup of a 
group having a pl-aliiy of memb«i. wiA a leaf node of a hier«chical tree, said leaf node 
having associated therewith a leaf key common to members of said subgroup, v^herdn upon 
eviction of at least one member of said gl0«p. said leaf key enables said member of said 
«*group to receive an update message for a key associated ^vith an interior node above said 
leaf node; md 

a compuiw-usable medium configBred to store the computer-readable program codes. 
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